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Abstract — Chaos and its applications in the field of secure 
communications have attracted a lot of attention. Chaos-based 
pseudo-random number generators are critical to guarantee 
security over open networks as the Internet. We have previously 
demonstrated that it is possible to define such generators with 
good statistical properties by using a tool called "chaotic itera- 
tions", which depends on an iteration function. An approach to 
find update functions such that the associated generator presents 
a random-like and chaotic behavior is proposed in this research 
work. To do so, we use the vectorial Boolean negation as a 
prototype and explain how to modify this iteration function 
without deflating the good properties of the associated generator. 
Simulation results and basic security analysis are then presented 
to evaluate the randomness of this new family of generators. 

Index Terms — Chaos; Pseudo-random number generator; Sta- 
tistical tests; Internet security; Iteration function. 

I. Introduction 

Security has become a topic of increasing importance in 
communications because the Internet and personal communi- 
cations systems are now accessible worldwide. To guarantee 
this security, chaotic systems have many advantages as unpre- 
dictability or disorder-like, and they are especially used when 
complex sequences are required ID, iH, ifTTI . This is why 
chaotic systems are frequently used to design new pseudo- 
random number generators (PRNGs) ||9l. Following this 
approach, we have previously proposed a PRNG based on 
chaotic iterations. A short overview of our recent researches 
in this field is given hereafter. 

In Ref. 131, it is proven that chaotic iterations (CIs), a 
suitable tool for fast computing iterative algorithms, satisfies 
the topological chaos property, as defined by Devaney ||6l. 
The chaotic behavior of CIs is used in fTl, to obtain an 
unpredictable PRNG that depends on two logistic maps. The 
resulted PRNG shows better statistical properties than each 
individual component alone. Additionally, various chaos prop- 
erties have been established. These chaos properties, inherited 
from CIs, are not possessed by the two inputted generators. We 
have shown that, in addition of being chaotic, this generator 
can pass the NIST battery of tests, widely considered as a 
comprehensive and stringent battery of tests for cryptographic 
applications ti3i|. Then we have achieved to improve the speed 
of the former generator in ||2l, ID, by using ISAAC and 
XORshift instead of the two logistic maps. These generators 
can pass the batteries DieHARD HOl and TestUOl lfT4ll . 

In these previous researches, the iteration function of CIs 
was always the vectorial Boolean negation. We propose now 
to enlarge the set of iteration functions such that the associated 
Cl-based generator is both chaotic and random-like. The well- 
known NIST and DieHARD tests are finally used to evaluate 
the statistical behavior of this new family of generators. 



The rest of this paper is organized as follows. In the next 
section, some basic definitions concerning CIs and our PRNG 
are recalled. In Section |lll] is explained how it is possible 
to change the iteration function of the generator without 
losing the good properties of our PRNG. NIST and DieHARD 
batteries are passed in Section|IV]to all of these generators. The 
paper ends with a conclusion section where our contribution 
is summarized and intended future work is presented. 

II. Review of Basics 

This section is devoted to basic notations and terminologies 
in the fields of chaotic iterations and PRNGs. 

A. Notations 

I1;N1 ->{1,2,...,N} 
S"- the n*'* term of a sequence S = {S^, S*^, . . .) 
Vi — > the i*'' component of a vector 

V = ivi,V2, . . ■,Vn) 

strategy^ a sequence which elements belong in |1; N] 
S — > the set of all strategies 
fi* — > the set of positive integers {1,2,3,...} 

B ^{0,1} 

B. Chaotic iterations 

Definition 1 Let / : — > be an "iteration" function 
and S* G §. Then, the so-caUed chaotic iterations are defined 
by [.121 e B^ and 



Vn e IN*,Vi G [1;N]|,< 



x^-' if S*" 7^ i 
/(a;"-i)s" if 5" = i. 



In other words, at the n*'* iteration, only the 5"— th cell is 
"iterated". 

C. Mapping matrix 

Chaotic iterations introduced above can be described by 
using the mapping matrix defined bellow. 

Definition 2 Let / : — > B^ be an itera- 
tion function, then its associated mapping matrix f is 
the matrix of size N x 2^ whose element fp g is 
the integer having the following binary decomposition: 

qn,---,qH-p,f{q)n-p+i,qn-p+2,---,qi, where (resp. 
f{q)i) is the i— th binary digit of q (resp. of f{q)). 

The relation between f and chaotic iterations of / can be 
understood as follows. If the current state of the system is q 
and the strategy is p, then the next state (under the chaotic 
iterations of /) will be fp.g. Finally, the vector J-{f) = 
(/(O), /(I), . . . , 7(2^ - 1)) G [0; 2^ - If" is called vector 
of images. An example is shown for the vectorial Boolean 
negation /o(a;i, . . . , xn) = • ■ • ^xn) in Table H] 



TABLE I: The matrix f associated to /o 
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D. Chaotic iterations as PRNG 

Algorithm [T] recalls the basic design procedure of our 
CIf{PRNGl,PRNG2) generator The internal state is x, 
the output array is r, and N G IN, N ^ 2. Parameters k 
and N are constants, PRNGl picks its values into {0; 1}, and 
PRNG2 takes a random integer into |1; N]. We have previously 
established that k must be greater than 3N (see HI). Finally, 
until now, f ^ fo- 



Input: the internal state x (N bits) 
Output: a state r of N bits 

m ^ PRNGlQ + k; 
for i ~ 0, . . . ,m do 
S ^ PRNG2{); 
xs ^ f{x)s; 
end 
r a;; 
return r; 



Algorithm 1: An 

GIf {PRNGl, PRNG2) 



arbitrary round of 



This Clf {PRNGl, PRNG2) generator may utilize any 
reasonable PRNGs as inputs. For demonstration purposes, two 
XORshift are adopted here for both PRNGl and PRNG2. Table 
nil gives an illustrative example using these PRNGs, where 
N = fc = 4 and = (14, 14, 12, 12, 10, 10, 9, 9, 6, 

6, 4, 4, 2, 2, 1, 0). 

III. Description of the selection scheme 

In this section is explained how the iteration function /o can 
be replaced without losing chaos and randomness. 

A. Strong connectivity and chaos 

Let / : B'^ ^ B^. Its iteration graph r(/) is the directed 
graph defined as follows. The set of vertices is B'^, and Vx G 
B'^,Vi G P; N|, r(/) contains an arc labeled i from x = 
(xi, . . . ,Xim) to (xi,...,a;i_i,/(x)i,Xi+i,...,XN). We have 
proven in ||71 that: 

Theorem 1 r/ie Clf {PRNGl, PRNG2) generator is 
chaotic according to Devaney if and only if the graph T{f) 
is strongly connected. 

Theorem [T] only focus on the topological chaos property. 
However, it is possible to find chaotic sequences with bad 
statistical properties, in particular when the iteration function 
is unbalanced. 

B. Obtaining Balanced Maps 

We now explain how to find balanced iterate functions. 

Theorem 2 Let j G |1; 2'^] and F = J'{fo) be the (balanced) 
vectorial Boolean negation: Fj = 2'^ — j. 



If F' = J-{f), a vector of images of a balanced iterate 
function f, is such that its j~th component differs from Fj 
by only its i ~ th bit (starting from the right), then F^^_p, ~ 

Proof: As only differs from Fj by its i — th bit, we 
have: Fj = F^ -Fj&2*-i + (j-l)&2'-i. Therefore, the value 
fj' j of the mapping matrix of F' can be computed as follows: 

f'ij = .jNjN-l---f{j)i--jl 

= ij - 1) - ij - i)&2'-i + f;&2'-i 

= (i - 1) - {j - l)&2'-i + FjkT-^ - Fjk2'-^ + 

{j - l)&2-i 

= ij 1) 

(1) 

The values in f are uniformly distributed. However, in the new 
matrix N, there are twice the value j — 1 and no fjj in the i-th 
row: the uniform distribution is lost. To restore the balance, 
one of the two j — I values must be found and replaced by 
fij. Let fc be a variable such that = j ^ 1 and f - f, ~ fij. 
As the th bits in fi^k and f'-f^ are equal, we have: 



I 



) = f.,j&(2' 



1 - 2 



(2) 



We can thus transform the equation fi fc = j — I as follows: 

h,k = j - I 

(fc - 1) - (fc - l)&2'-i + Ffe&2'-i = j -I (3) 

(fc - 1)&(2'^ - 1 - 2'-i) + FkkT-^ = j - L 

Moreover, from Ffc&2* = 2'^ — 1 — fc, we obtain: 

Ffc&2*"i = {j ~ l)&2*-i 

(2^ - fc)&2' = {j ~ l)&2^-i (4) 
(fc-l)&2*-i ^ (fc- l)&2*-i - (j - l)&2^-i. 

According to Equations (O and we have: 

fc - 1 = (j - 1) + (fc - l)&2*-i - Ffe&2'-\ 
where Ffe = 2^ - fc 

= {j - 1) + (fc - l)&2*-i - 2'-i + (fc - l)&2*-i 
= {j - 1) - 2*-i + ((fc - l)&2'-i) * 2. 
But, due to Equation ([5]), we have: 

= {j - 1) - 2*-i + ((fc - l)&2'-i - {j - l)&2'-i) * 2 

= (j - 1) + 2'-i - {{j - l)&2*-i) * 2 

= (j - 1) + (j - l)&2-i + (2^ - j)kT-\ 

where F, = 2^^ - I - j 



(j-l) + (j-l)&2'-i+F,&2* 



As 



n.k ^{k-l)-{k- l)k2 
and according to Equation (|5]l, we thus have: 

(fc - l)&2*-i. 



F^&2*-i 
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Binary Output: xjx^xgz^xgxf x|a;|x!x|a;fx|x|a;|a;|xPx^3^ ^ 0100011001110001... 
Integer Output: x^, x'', x , x^, x°... = 6, 7, 1... 

TABLE II: Application example 



Now, from Equation (|2]l, we can set that: 

f'ikH^^ - 1 - 2'"^) = fz.j&(2^ - 1 - 2*-i) 
((fc - 1) - (A: - l)&2'-i + i^^.&2*-i)&(2'^ - 1 - 2^-1) = 
((fc - 1) - (A: - l)&2'-i + i^fe&2'-i)&(2^' - 1 - 2*-i) 
i^^&(2^' - 1 - 2*) = Ffc&(2^ - 1 - 2^. 

(8) 

By using both Equations dTji and (O, we obtain: 

= (fc-l)&2'-i+Ffe&(2^'-l-2'-i) 
= (fc-l)&2''-i+Ffe-Ffc&2»-i 
= f.,,&2»-i + (2^ - 1 - f,j) - (2~ - 1 - f,,j)&2»-i 
= (2" - 1) - [f,., + 2^-1 - 2 X (f,.,&2^-i)] 



= (2^ - 1) - ((j - 1) - (j - l)&2*-i + F_,-&2'-i 
+2^-1 - 2 X [((j - 1) - (j - l)&2^-i + F,&2^-i) 

&2*^i 

= (2^ - 1) - ((j - 1) - (j - l)&2-i - F_,-&2-i 

+ 2^-1) 

= (2^ - 1) - {{j - 1) + 2*-i&(2^ - j) - F,&2*-i) 
= (2^ - 1) - {{] - 1) + Fj&2*-i - Fjk2'-^) 
= (2^ - 1) - (j - 1) 

= 2^ - 

(9) 

Finally, from Equation (|5]l, we can conclude that: 

k = U.J + 1 

= (.7 - 1) - (.7 - l)&2*-i + Fjk2'-^ 

= 2^ - (2^ - j) - (j - l)&2'-i + Fjk2'-^ (10) 

= 2" - (Fj - Fj&2' + (j ~ l)&2'-i) 

= 2" - F'. 



With such equations (namely, Eq. (|9]l and (fTOli). the balance 
of the new table can be obtained by computing the mapping 
values. In other words, there is a bijection from the set A of 
the inputs x into the set B of F'{x) values. 

Let us give an example. In Table U is given the mapping 
matrix for the vectorial Boolean negation, with N = 4. 
Obviously, the values in f are uniformly distributed: each 
integer from to 15 occurs once per row. Now, if we desire 
to set F{ as 14, then f4 = 0: there will be two and no 1 in 
the fourth row of f . Due to the previous study, we know that 
F2 must be set to 15 too, which leads to f4 2 = 1: the balance 
is recovered. 

To sum up, we can determine whether the modification of a 
bit in the vector of images of the negation function preserves 



the balance of the outputs or not, by using the following rule 
(necessary condition): 

. ifF;==C, 

. then C ^ Fj - Fjk2'-^ + {j - l)&2'-\ 
• and also F2n_q = 2^ — j. 

This rule, we name it "Balance Iteration Mapping Rule", can 
be used as a criterion to find iterate functions leading to good 
CI PRNGS, as it is depicted in Algorithm |2] Let us finally 
remark that, with such a process, it is possible to find new 
iteration functions by changing more than 1 couple of values 
in the vectorial Boolean negation F. Indeed it is obvious that 
2, 3, 4, and even 8 couples of values can be changed using 
the Balance Iteration Mapping Rule. For instance. Table HU] 
contains 8 vectors of images obtained by using Algorithmic 
one or more times. All of these functions satisfy the hypothesis 
of Theorem [1] too, and thus their dynamical systems behave 
chaotically. 



Input: a vector of images F 
Output: a vector of images r or 
for i = 0, . . . , 2^ - 1 do 
for j = 0, . . . , do 

if F{i + 1)^ F{i + 1) - F{i + l)k2^ + ik2^ 
then 

if F(i + 1) ^ 2^ - 1 - i then 
I return 0; 
end 

end 

end 

if F{2^ - F{i)) ^2^ -i then 
I return 0; 
end 
end 

return F\ 

Algorithm 2: The Balance Iteration Mapping Rule. 



IV. Statistical analysis 

A good random number generator must be indistinguishable 
from a random sequence through any statistical test. As an 
illustration of the theory presented in this paper, we have used 
various batteries of tests in order to evaluate the quality of 
our proposed pseudo random number generator, when iterating 



TABLE IV: Results through NIST SP 800-22 and DieHARD batteries of tests (Ft values) 



Method 


F! 
1 


F' 

2 


FL 


Fi 

4 


Fl 
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FL 
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F' 

7 


FL 
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0.102526 
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A T7A 1 OO 
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A OAT7/; ~) 
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A ") O 1 OT7 
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A '^^^'^ An 
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0.236810 


0.514124 


0.262249 


A O 1 0*7 
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A A'n ACtO 

0.4/4986 


A AOAC 1 A 

0.080519 


A AAAAA 1 

0.000001 


A T7A 1 OO 

0. / /9188 


Kandom Excursions lest^ 


O.J5il42 


(\ H A "! 1 1 A 

0.4032 ly 
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A H O 1 AO C 

0.481025 


0.31 /506 


A /;A0A'70 
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A H 1 /^n A 
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n 41 9Q87 
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U.J i JO / " 


/'+0 1 J 


U.J 7 1 i OO 


U.^+JM- i J / 


U. Jt 1 U 1 .z. 


Serial Test* (m=10) 


0.304324 


0.102735 


0.270033 


0.384058 


0.456684 


0.125973 


0.404429 


0.253197 


Linear Complexity Test 


0.759756 


0.153763 


0.883171 


0.171867 


0.366918 


0.319084 


0.678686 


0.075719 


Success 


15/15 


15/15 


15/15 


15/15 


15/15 


15/15 


15/15 


15/15 


Diehai'd Test 


pass 


pass 


pass 


pass 


pass 


pass 


pass 


pass 



Name 


Map 


F 


[15,14,13,12,11,10,9,8,7,6,5,4,3,2,1,0] 


F'l 


[14,15,13,12,11,10,9,8,7,6,5,4,3,2,1,0] 


F'2 


[14,15,13,12,9,10,11,8,7,6,5,4,3,2,1,0] 


F>3 


[14,15,9,4,11,8,13,10,7,6,5,12,3,2,1,0] 


F'4 


[14,15,9,12,3,8,13,10,7,6,5,4,11,2,1,0] 


F>5 


[14,15,9,4,11,8,13,10,7,6,5,12,3,2,0,1] 


F'6 


[14,15,9,4,11,8,13,10,3,6,5,12,7,2,0,1] 


F'l 


[14,15,9,4,3,8,13,10,5,2,7,12,11,6,1,0] 


F'8 


[14,15,5,8,9,2,11,12,3,4,13,6,7,10,0,1] 



TABLE III: New vectors of images 



functions of Table |lll] These batteries are the well-known and 
stringent DIEHARD HO) and NIST US) statistical test suites. 

We can conclude from Table |IV] that all of the generators 
based on the new iterate functions have successfully passed 
both the NIST and DieHARD batteries of tests. These results 
show the good statistical properties of the proposed PRNGs, 
and thus the interest of the theoretical approach presented in 
this paper 

V. Conclusion and future work 

In previous researches, we have presented a pseudo-random 
number generator based on chaotic iterations. It depends on 
an iteration function, formerly fixed to the negation function. 
We have previously established a characterization of functions 
leading to a chaotic behavior for the associated generator 
However, this characterization allows unbalanced functions, 
whose generator cannot pass statistical tests. We have proposed 
in this paper an algorithm that can find iteration functions 
leading to a chaotic generator statistically irreproachable. This 
algorithm has been used to find 8 functions such that their 
generators are both chaotic and able to pass the NIST and 
DIEHARD statistical batteries of tests. 

In future work, we will continue to explore conditions that 
improve the randomness of the associated CI PRNGs. New 
statistical tests will be used to compare these PRNGs to 
existing ones, and a cryptanalysis of our generator will be 
proposed. Finally, new applications in computer science will 
be proposed, especially in the Internet security field. 
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